Caches and requests need authentication

(closes #299)